
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft
File: B7vs0OoIn8ZO4UDdyN26UufZENA.mft (raw, json)
Hash identifier: xxTbYivJD/JnDuXwXENrZaeMaocxw5Qnc+4ehm1SoPQ=
Subject key identifier: F2:62:87:B2:90:9A:F1:97:50:55:84:91:FB:C4:97:5B:E2:25:A1:FA
Authority key identifier: 07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0
Certificate issuer: /CN=A912E64A/serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0
Certificate serial: 0683
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft
Manifest number: 0671
Signing time: Tue 24 Mar 2026 22:16:20 +0000
Manifest this update: Tue 24 Mar 2026 22:16:20 +0000
Manifest next update: Tue 31 Mar 2026 22:16:20 +0000
Files and hashes: 1: B7vs0OoIn8ZO4UDdyN26UufZENA.crl (hash: Bv5aijIfh4HfbHos+11DZbLmnDCYMUT/qQTrvqWRlZE=)
2: 55B56780BABA11EB8A51C234C4F9AE02.roa (hash: qAA+JmCD1XiQPNk2+rjFsSeH+9Ig2+qzcEQPIf4Yw7U=)
3: 55056D1CBABA11EB8A51C234C4F9AE02.roa (hash: PJtMmmzqWr4Ah2oRz29LH07ry6ra6iCiilV599rXJrQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl
rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1667 (0x683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E64A, serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0
Validity
Not Before: Mar 24 22:16:20 2026 GMT
Not After : Mar 31 22:16:20 2026 GMT
Subject: CN=69c30d34-7d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bc:d7:0f:0e:15:17:87:a1:e4:52:65:08:fe:
83:3c:bb:aa:3e:f7:66:1b:5f:59:b8:cc:fe:ec:f1:
91:db:b9:ed:23:18:c6:40:3e:28:80:93:27:b3:ff:
f4:ab:bc:ae:21:83:0c:74:dc:ac:01:c7:72:f3:1d:
9d:ec:99:02:8c:81:c4:88:3a:da:e5:e3:9b:a7:69:
57:2b:16:0c:3d:aa:89:25:07:a6:74:8b:d6:c9:c3:
ee:58:32:a9:42:ab:7e:eb:4e:19:46:48:b4:20:13:
cf:e5:b9:8b:da:43:13:b7:9d:73:bc:a3:fc:8e:36:
88:fd:fd:3e:b7:12:f5:f8:b0:a3:57:b2:e0:2c:5e:
8d:3e:bd:58:4b:db:5f:57:15:80:0d:6f:eb:8a:40:
26:e1:8a:ee:15:74:fa:2d:86:6f:32:7a:48:91:aa:
a5:a3:98:96:74:30:50:d9:13:fa:ad:be:58:ea:33:
49:3b:f6:28:5c:c4:5c:dc:bf:28:f8:43:35:42:6e:
f0:b3:01:20:37:42:42:10:8c:39:93:1f:76:56:87:
68:08:27:cf:cc:9a:8b:13:ec:f4:4e:25:43:c2:76:
b3:59:f1:8e:a8:40:46:f0:c7:66:5c:5d:7c:02:a6:
a2:a2:28:2b:d4:4c:78:e9:71:37:f1:a5:d8:9f:f8:
6e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:62:87:B2:90:9A:F1:97:50:55:84:91:FB:C4:97:5B:E2:25:A1:FA
X509v3 Authority Key Identifier:
keyid:07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:f5:77:dc:ef:0b:7c:62:36:61:2e:74:10:e6:e1:c9:88:57:
23:bc:2b:75:3a:c0:cb:9d:a6:7f:1f:3d:4d:53:a3:73:c1:77:
1b:ed:ec:ca:8a:fe:a7:0f:de:87:cc:47:44:f2:b0:09:3a:3b:
18:a6:74:29:36:59:a3:3a:dd:dc:bb:d7:06:bb:02:dc:21:63:
73:0d:be:b7:4d:af:cf:8e:c0:91:38:38:15:7d:d7:6e:50:4d:
35:96:0d:b7:fb:91:6a:4e:51:1a:c3:d0:6d:eb:c3:3b:ca:bf:
6f:58:3b:a9:da:5f:57:00:6a:05:b8:04:ca:2c:0e:51:82:bd:
89:1d:a3:29:77:6e:05:ab:c8:8c:6c:c0:41:30:56:05:f4:e2:
d0:e8:9c:a7:6d:b4:64:ce:76:7a:aa:79:44:bf:7c:1f:30:5b:
a6:ee:3a:5f:f1:f4:2f:51:dd:44:e8:41:8a:2f:e4:a8:d0:87:
b9:45:ef:db:79:b1:db:49:68:99:5a:6a:80:fc:51:09:7f:35:
49:06:18:13:22:68:b4:eb:7c:78:92:2c:5d:2e:6f:24:c6:97:
c6:e2:7a:99:8e:f9:ba:16:5a:fa:d4:53:81:dc:47:3e:21:dc:
ab:1a:d5:c8:70:cb:e9:d0:b6:4c:07:ee:80:58:9f:d9:e2:67:
b7:fb:37:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:53:23 2026 by rpki-client